$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa File: c686f937-000a-490a-846c-e2773b637b26.roa (raw, json) Hash identifier: snWn9Jjro067pAQ4dkvFdphb0JC5K6J17fgQFqucUe0= Subject key identifier: 08:46:F8:54:D2:8C:F6:1D:5E:28:97:4B:BC:6D:96:29:6A:11:ED:67 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 4B34DC58CDE5D2DD91B9CDA2E8DFCEC670BAF6B7 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa Signing time: Sat 26 Jul 2025 00:20:18 +0000 ROA not before: Sat 26 Jul 2025 00:20:18 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:34:dc:58:cd:e5:d2:dd:91:b9:cd:a2:e8:df:ce:c6:70:ba:f6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Jul 26 00:20:18 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=a784e6d065b09d6c41613f2f8433f46df99980cfa16cd98faf8d3dc469f47095, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:45:c0:da:5f:34:1c:21:b1:0a:ee:86:62: c8:f8:96:9d:a1:37:fc:4e:f1:f8:4a:7c:ef:70:41: fc:3f:e5:30:62:ab:28:03:e1:7b:39:cc:2c:b6:2c: cc:99:35:85:68:58:74:62:ba:61:72:f1:bc:6a:02: 5f:31:79:2a:02:66:2f:94:dc:eb:8f:f6:42:ab:3a: 63:76:89:25:f8:22:59:c3:13:30:0e:ee:b2:e6:8c: ea:4c:5b:8d:7e:bb:ae:7b:b4:80:0b:c1:ce:10:ea: 25:70:aa:35:bc:da:e8:32:d2:f1:81:a6:3c:8b:d9: 99:58:4a:de:14:a3:5f:d0:78:51:67:cb:ee:21:42: 88:cb:6e:cc:a0:34:6b:09:ab:ef:e1:bb:53:7c:76: 21:c1:5a:34:0d:db:10:43:52:35:13:c8:7f:b9:2b: b7:28:87:91:c8:97:d5:7d:c9:10:c8:ac:68:50:17: 52:75:8f:f7:ae:89:66:0a:1f:ac:63:0e:91:68:79: 4b:0e:31:21:55:ab:fd:1c:69:f1:4e:99:31:79:3a: e7:ad:d9:17:e5:9d:9c:47:90:5f:cd:6d:bd:e2:99: 97:96:7e:e1:91:7f:5d:f3:86:03:99:06:e3:93:f3: c1:39:57:75:10:c4:b0:e6:b4:10:da:c3:5d:30:0f: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:46:F8:54:D2:8C:F6:1D:5E:28:97:4B:BC:6D:96:29:6A:11:ED:67 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40::/32 Signature Algorithm: sha256WithRSAEncryption 8e:04:ec:0e:10:0e:3f:4c:95:ef:cd:fc:27:b4:ea:f4:73:ca: 27:0e:63:c0:07:1a:96:5b:28:d4:b3:1b:c0:ac:28:cd:ad:be: 69:3e:b9:31:b3:42:7b:29:b9:1e:a6:9b:28:ba:75:0d:80:d0: a3:37:d5:46:d6:b4:6f:0b:e4:d0:c3:91:39:74:8f:f6:11:04: 54:09:ad:03:41:58:08:60:65:ff:63:05:40:c3:2f:99:0f:eb: f9:a5:63:dd:5d:a2:7d:2a:70:94:66:e1:b0:94:fe:c9:a9:83: e0:ab:1e:58:41:0b:1a:1e:ea:f3:fd:24:93:92:1d:ba:23:05: 0a:ea:f9:ea:c1:cc:88:aa:3d:55:31:ad:5a:a4:f3:45:a6:42: bd:61:3d:55:1d:86:ab:e8:c0:34:b9:99:62:77:0d:40:42:8f: a9:3e:30:5f:dd:6d:4e:83:66:0f:39:02:46:42:f9:64:be:77: 49:55:7a:e3:de:ed:4c:d2:6a:68:51:2d:07:62:bd:e8:a1:98: 06:cb:77:3a:12:73:11:5d:2c:37:06:bf:01:eb:2b:1a:6e:b0: b9:65:16:14:56:26:25:ac:dc:27:e8:5f:4d:93:a6:7c:0e:bf: 19:02:11:b1:2a:63:aa:ba:ae:51:28:3b:de:28:7d:22:0a:32: 04:80:30:70 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUSzTcWM3l0t2Ruc2i6N/OxnC69rcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUwNzI2MDAyMDE4WhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzg0ZTZkMDY1YjA5ZDZjNDE2MTNmMmY4NDMzZjQ2ZGY5 OTk4MGNmYTE2Y2Q5OGZhZjhkM2RjNDY5ZjQ3MDk1MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQiUXA2l80HCGxCu6GYsj4lp2hN/xO8fhKfO9wQfw/5TBi qygD4Xs5zCy2LMyZNYVoWHRiumFy8bxqAl8xeSoCZi+U3OuP9kKrOmN2iSX4IlnD EzAO7rLmjOpMW41+u657tIALwc4Q6iVwqjW82ugy0vGBpjyL2ZlYSt4Uo1/QeFFn y+4hQojLbsygNGsJq+/hu1N8diHBWjQN2xBDUjUTyH+5K7coh5HIl9V9yRDIrGhQ F1J1j/euiWYKH6xjDpFoeUsOMSFVq/0cafFOmTF5Ouet2RflnZxHkF/Nbb3imZeW fuGRf13zhgOZBuOT88E5V3UQxLDmtBDaw10wD2YLAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUCEb4VNKM9h1eKJdLvG2WKWoR7WcwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2M2ODZmOTM3LTAwMGEtNDkwYS04NDZjLWUyNzczYjYzN2IyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBg9AMA0GCSqGSIb3DQEBCwUAA4IBAQCOBOwOEA4/TJXvzfwntOr0c8on DmPABxqWWyjUsxvArCjNrb5pPrkxs0J7KbkeppsounUNgNCjN9VG1rRvC+TQw5E5 dI/2EQRUCa0DQVgIYGX/YwVAwy+ZD+v5pWPdXaJ9KnCUZuGwlP7JqYPgqx5YQQsa Hurz/SSTkh26IwUK6vnqwcyIqj1VMa1apPNFpkK9YT1VHYar6MA0uZlidw1AQo+p PjBf3W1Og2YPOQJGQvlkvndJVXrj3u1M0mpoUS0HYr3ooZgGy3c6EnMRXSw3Br8B 6ysabrC5ZRYUViYlrNwn6F9Nk6Z8Dr8ZAhGxKmOquq5RKDveKH0iCjIEgDBw -----END CERTIFICATE-----Generated at Tue Aug 5 16:44:20 2025 by rpki-client